X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Fmethods%2FGetCredential.py;h=d966dd3f25302f1f7ec75d1d7fb6de03bfde106f;hb=6cb4717ad2a1ff4a08d73c7cc0dea759f12ab6d5;hp=d047a0683749e8b8cebaeea3dc9cdf9300153b36;hpb=680d4fc1af88ed631f820545216bee6e7a698f39;p=sfa.git diff --git a/sfa/methods/GetCredential.py b/sfa/methods/GetCredential.py index d047a068..d966dd3f 100644 --- a/sfa/methods/GetCredential.py +++ b/sfa/methods/GetCredential.py @@ -1,23 +1,16 @@ -### $Id: get_credential.py 17576 2010-04-05 20:56:15Z tmack $ -### $URL: https://svn.planet-lab.org/svn/sfa/trunk/sfa/methods/get_credential.py $ - -from sfa.trust.credential import * -from sfa.trust.rights import * -from sfa.util.faults import * -from sfa.util.namespace import * +from sfa.util.xrn import urn_to_hrn from sfa.util.method import Method from sfa.util.parameter import Parameter, Mixed -from sfa.util.debug import log from sfa.trust.credential import Credential -class get_credential(Method): +class GetCredential(Method): """ Retrive a credential for an object - If cred == Nonee then the behavior reverts to get_self_credential + If cred == None then the behavior reverts to GetSelfCredential - @param cred credential object specifying rights of the caller - @param type type of object (user | slice | sa | ma | node) @param hrn human readable name of object (hrn or urn) + @param cred credential object specifying rights of the caller + @param type type of object (user | slice | node | authority ) @return the string representation of a credential object """ @@ -25,29 +18,29 @@ class get_credential(Method): interfaces = ['registry'] accepts = [ - Mixed(Parameter(str, "credential"), - Parameter(None, "No credential")), - Parameter(str, "Human readable name (hrn or urn)") + Mixed(Parameter(str, "Credential string"), + Parameter(type([str]), "List of credentials")), + Parameter(str, "Human readable name (hrn or urn)"), + Mixed(Parameter(str, "Record type"), + Parameter(None, "Type not specified")), ] returns = Parameter(str, "String representation of a credential object") - def call(self, cred, type, xrn, origin_hrn=None): + def call(self, creds, xrn, type): + if type: hrn = urn_to_hrn(xrn)[0] else: hrn, type = urn_to_hrn(xrn) + # check creds + valid_creds = self.api.auth.checkCredentials(creds, 'getcredential') + self.api.auth.verify_object_belongs_to_me(hrn) + #log the call - if not origin_hrn: - origin_hrn = Credential(string=cred).get_gid_caller().get_hrn() + origin_hrn = Credential(string=valid_creds[0]).get_gid_caller().get_hrn() self.api.logger.info("interface: %s\tcaller-hrn: %s\ttarget-hrn: %s\tmethod-name: %s"%(self.api.interface, origin_hrn, hrn, self.name)) - self.api.auth.check(cred, 'getcredential') - self.api.auth.verify_object_belongs_to_me(hrn) - # send the call to the right manager - manager_base = 'sfa.managers' - mgr_type = self.api.config.SFA_REGISTRY_TYPE - manager_module = manager_base + ".registry_manager_%s" % mgr_type - manager = __import__(manager_module, fromlist=[manager_base]) - return manager.get_credential(self.api, xrn, type) + return self.api.manager.GetCredential(self.api, xrn, type) +